US 9,853,993 B1Granted

Systems and methods for generation and selection of access rules

AssigneeVisa International Service Association

InventorsHaochuan Zhou, Hung-Tzaw Hu, Rong Zhang, Benjamin Scott Boding

Life of this patent

Estimating the term…

Loading patent…

Abstract

In some embodiments, a resource security system may determine an access request outcome (e.g., accept, reject, or review) for an access request based on access rules. The resource security system may generate and select the access rules to be used for using stability information. For instance, the resource security system may select a training set from the received access requests, e.g., including recently received access requests, and generate a plurality of potential access rules based on the training set. The resource security system may determine and compare the detection performance and the stability performance of the potential access rules. The resource security system may select the best performing potential access rules to be used in operation for determining the outcome of access requests.

Claims20

Dependent claims

A method for securing access to a resource, the method comprising performing, by a computer system:

storing a plurality of previous access requests and parameters of the plurality of previous access requests;
storing validity information corresponding to the plurality of previous access requests, the validity information indicating whether each access request of the plurality of previous access requests is valid or invalid;
generating a potential access rule including one or more conditions;
determining a first set of previous access requests of the plurality of previous access requests, each previous access request of the first set including one or more parameters that involve the one or more conditions of the potential access rule;
determining a total predictive percentage for the potential access rule based on the validity information corresponding to each previous access request of the first set of previous access requests;
segmenting the first set of previous access requests into a plurality of time-based subsets of access requests;
determining a predictive percentage for each of the plurality of time-based subsets based on the validity information corresponding to each previous access request of the time-based subsets;
determining a detection stability rating of the potential access rule by comparing the plurality of predictive percentages;
selecting the potential access rule to be included in an operational set of access rules based on the detection stability rating of the potential access rule compared to detection stability ratings of other access rules;
loading the operational set of access rules into a system memory;
receiving, over a network from a plurality of devices, a plurality of real-time access requests;
accessing the system memory to obtain the operational set of access rules when one of the plurality of real-time access requests is received from a first device of the plurality of devices;
using the operational set of access rules to determine an access request outcome for the one real-time access request;
and
providing access to the resource based on the access request outcome.

12 more elements

A computer system, comprising:

a computer readable storage medium storing a plurality of instructions;
and
one or more processors for executing the instructions stored on the computer readable storage medium to:
store a plurality of previous access requests and parameters of the plurality of previous access requests;
store validity information corresponding to the plurality of previous access requests, the validity information indicating whether each access request of the plurality of previous access requests is valid or invalid;
generate a potential access rule including one or more conditions;
determine a first set of previous access requests of the plurality of previous access requests, each previous access request of the first set including one or more parameters that involve the one or more conditions of the potential access rule;
determine a total predictive percentage for the potential access rule based on the validity information corresponding to each previous access request of the first set of previous access requests;
segment the first set of previous access requests into a plurality of time-based subsets of access requests;
determine a predictive percentage for each of the plurality of time-based subsets based on the validity information corresponding to each previous access request of the time-based subsets;
determine a detection stability rating of the potential access rule by comparing the plurality of predictive percentages;
select the potential access rule to be included in an operational set of access rules based on the detection stability rating of the potential access rule compared to detection stability ratings of other access rules;
load the operational set of access rules into a system memory;
receive, over a network from a plurality of devices, a plurality of real-time access requests;
access the system memory to obtain the operational set of access rules when one of the plurality of real-time access requests is received from a first device of the plurality of devices;
use the operational set of access rules to determine an access request outcome for the one real-time access request;
and
provide access to a resource based on the access request outcome.

15 more elements

Dependencies are inferred from the claim text.